2889df901fe7291360fb4a762493b85d5a4207d4d3f21ab182c4bcba4cfed510

General

Target
$RL13T17.zip
Size 21.6MB
Sample260802-nt39cshd88
SHA256 2889df901fe7291360fb4a762493b85d5a4207d4d3f21ab182c4bcba4cfed510
MD5 f5b38441b17152b29f637a5cd34532a1
SHA1 1788b477da196633bdec5859fc9e756eeea2685a
SHA512 2cd22c4cee6f0c1026078b78ffcfe229e83c5db6008d9d4ac2647a2dc99b1f673688f6ab091c14fa99bdb5c15cdca35b92fbfdc5ab12f68154d84f444e0dec72
SSDEEP 393216:a3tWeZqlIO28v5DpI+NkjwYX80fGkahKdho8jpE7och6F0NwFCGXFdcxY8yyk1+J:EWN28BDJmEYyBsho81E/h6UwXTc/dyTi
TLSH
T18837339591FA76EF3829F05FEF53F0E1134B91FD474EC2862E129887F24A36186A0653
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  $RL13T17.zip
- Size 21.6MB
- SHA256 2889df901fe7291360fb4a762493b85d5a4207d4d3f21ab182c4bcba4cfed510
- MD5 f5b38441b17152b29f637a5cd34532a1
- SHA1 1788b477da196633bdec5859fc9e756eeea2685a
- SHA512 2cd22c4cee6f0c1026078b78ffcfe229e83c5db6008d9d4ac2647a2dc99b1f673688f6ab091c14fa99bdb5c15cdca35b92fbfdc5ab12f68154d84f444e0dec72
- SSDEEP 393216:a3tWeZqlIO28v5DpI+NkjwYX80fGkahKdho8jpE7och6F0NwFCGXFdcxY8yyk1+J:EWN28BDJmEYyBsho81E/h6UwXTc/dyTi
- TLSH
  T18837339591FA76EF3829F05FEF53F0E1134B91FD474EC2862E129887F24A36186A0653
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  newui.exe
- Size 103KB
- SHA256 3d1cc3ae0f589a160aeb686cbfd9441fcb01f2e07c4f785e3caeae9b8b2deffb
- MD5 1179c502d07285a7758a844706ba5638
- SHA1 85984c089692715412ff4806b5e00d18d333bbfe
- SHA512 ff649780df380add0aca0725eef734355a5edb141afdc7a08f79f34bec96c046fce8dbe0d63db3baa8d36e57dd47ec0d4ec3b4f1deccda2ddb8927eb3d3f0502
- SSDEEP 3072:wzd35JVZPJnRQSLAtHsMBEX/NNh4S3Obr8:S5+
- TLSH
  T1ACA374013C4001FAEC77923C9B9D57C9D7ECBB08639496AFABCD505411719AA2DFAE23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence privilege_escalation
- Drops file in Drivers directory
behavioral3 behavioral4
- Target
  version.dat
- Size 24.8MB
- SHA256 4d99181dfb3331d980e946cc9b412c75324fb27b851778659790b4e8bc3f0417
- MD5 e92b2ab39d74ee2edaaa485a1d22774c
- SHA1 8d7e3da26c73e3125c3ac8099517060c0ed5b796
- SHA512 22ce8cc8fac96c837d1a549b9062ae1bdc75289ef4fcfad73f88c8cfcbdc20e12962ceb3da24605263d436392e613aa58b18dd3b036808638bc48f70f45387cb
- SSDEEP 786432:UoREpt8kcUy2cU6ZcU8E0cUfWlCnBSPYr63sgpe:UrcUy2cU6ZcUIcUOcBYYIk
- TLSH
  T18247224A9EBEB80910183ADBBB579EBE3C46ED2045E5C38451B1A63DE35CE41076BF31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6